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AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Claims 1 -63 (Cancelled) 

64. (Previously presented) A method of storing a data set on a storage device having one 
or more portions of random data, comprising: 

determining using a process dependent upon a user input passphrase, a first storage 
writing process starting location at a first offset within one of the portions of random data for 
initiating a first storage wilting process for storing a file index; 

determining a second storage writing process starting location at a second offset within 
one of the portions of random data for initiating a second storage writing process for storing the 
data set , said second offset determined using a process that is independent of the process used to 
generate said first offset; 

encrypting the data set; 

writing the encrypted data set using the second storage writing process beginning at the 
second storage writing process starting location in one of the portions of random data; 

creating the file index including an entry in the file index in respect of the data set. the 
entry comprising an indication of the second storage writing process starting location; 

encrypting the file index; and 

writing the encrypted file index using the first storage writing process beginning at the 
first storage writing process starting location in one of the portions of random data. 
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65. (Previously presented) A method of operating a computer to store a data set on a 
storage device, comprising: 

determining a first location at a first offset within the storage device for initiating a first 
storage writing process for storing a file index; 

determining a second storage writing process starting location at a second offset within 
the storage device for storing the data set, said second offset determined using a process that is 
independent of a process used to generate said first offset; 

encrypting the data set: 

writing the encrypted data set using a second storage writing process beginning at the 
second storage writing process starting location in a portion of random data; 

creating the file index including an entry in the file index in respect of the data set, the 
entry comprising an indication of the second storage writing process starting location; 

encrypting the file index; and 

writing the encrypted file index using the first storage writing process beginning at the 
first storage writing process starting location. 

66. (Previously presented) The method according to claim 64 in which determining the 
first storage writing process starting location for creating the file index comprises adding a 
predetermined offset to the first storage writing process stalling location as a beginning of the 
file index. 

67. (Previously presented) The method according to claim 64 wherein the encrypted file 
index is stored only within the portions of random data on the device. 
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68. (Previously presented) The method according to claim 64 in which the encrypted file 
index is stored within one or more of the portions of random data hy writing over random data 
portions within the storage device with the encrypted file index data. 

69. (Previously presented) The method according to claim 64 wherein the encrypted 
data set is stored only within the portions of random data. 

70. (Previously presented) The method according to claim 64 in which the encrypted 
data set is stored within one or more of the portions of random data by writing over random data 
portions within the storage device with the encrypted data set. 

71. (Previously presented) The method according to claim 64 which further comprises a 
using the user input passphrase for generating a key for encrypting the file index. 

72. (Previously presented) The method according to claim 64 in which the passphrase is 
used for generating a key for encrypting the data set. 

73. (Previously presented) The method according to claim 64 in which the passphrase is 
used in selecting the second storage writing process starting location. 

74. (Previously presented) The method according to claim 64 in which at least one of 
the first location within one of the portions of random data, the second location within one of the 
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portions of random data, a key for the file index and a key for the data set is determined by using 
at least one hash, function to operate on the user input passphrase. 

75. (Previously presented) The method according to claim 64 in which the passphrase is 
operated on once to produce an output which is used for determining at least two of the first 
location within one of the portions of random data, the second location within one of the portions 
of random data, a key for the file index and a key for the data set. 

76. (Previously presented) The method according to claim 64 in which the passphrase is 
operated on a plurality of times, each operation generating an output for use in determining at 
least one of the first location within one of the portions of random data, the second location 
within one of the portions of random data, a key for the file index and a key for the data set. 

77. (Previously presented) The method according to claim 64 in which a common key is 
used for encrypting the data set and for encrypting the file index. 

78. (Previously presented) The method according to claim 64 which comprises a step of 
storing further sets of data using said passphrase. 

79. (Previously presented) The method according to claim 78 which is such that a 
respective location for each data set is selected, each data set is encrypted and stored at the 
respective location, and respective entries are added to the file index. 



-5- 



1487627 



RULE 312 AMENDMENT 
U.S. Application No. 10/588,657 



Atty. Docket No.: 34-134 
Art Unit No.: 2166 



80. (Previously presented) The method according to claim 64, comprising a step of 
storing further file indexes within one of the portions of random data, each of which is associated 
with a respective passphrase and. each of which is encrypted and is stored at a location selected in 
dependence on the respective passphrase. 

81 . (Previously presented) The method according to claim 80 in which respective 
encryption keys are generated from the respective passphrases and these respective keys are used 
for encrypting data sets which are associated with each file index. 

82. (Previously presented) The method according to claim 80 comprising a step of 
selecting the passphrase for, and hence location for, an additional file index with knowledge of 
the respective passphrases corresponding to file indexes already stored in one of the portions of 
random data such that collisions may be avoided. 

83. (Previously presented) The method according to claim 80, in which, there are a 
plurality of file indexes stored in one of the portions of random data, the method comprises a step 
of selecting a location for an additional data set with knowledge of the respective passphrases 
corresponding to file indexes already stored in one of the portions of random data such that 
collisions may be avoided. 

84. (Previously presented) The method according to claim 80 comprising a step of 
storing additional data sets using an additional passphrase whil st in ignorance of at least one 
other existing passphrase. 
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85. (Previously presented) The method according to claim 80 comprising a step of 
storing data sets in a predetermined relationship to a respective file index to help prevent 
collisions, for example the data sets may be stored adjacent to the respective file index, the data 
sets may he stored substantially contiguously to the respective file index, and the data sets may 
be stored at locations close to but after the respective file index. 

86. (Previously presented) The method according to claim 64 comprising a step of 
storing data on the storage device carrying a plurality of files of random data. 

87. (Previously presented) The method according to claim 64 in which the file index 
comprises a message authentication code. 

88. (Previously presented) The method according to claim 87 in which the file index 
comprises a message authentication code of all associated data sets so as to facilitate detection of 
tampering. 

89. (Previously presented) The method according to claim 87 in which the file index 
comprises a message authentication code of one of the portions of random data in its entirety for 
use in detecting other usage of one of the portions of random data. 

90. (Previously presented) The method according to claim 64 comprising a step of 
preprocessing the data set prior to encryption. 
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91. (Previously presented) The method according to claim 64 comprising a step of 
presenting a user with an indication of a location within one of the portions of random data that 
will be selected for the file index when using a predetermined passphrase. 

92. (Previously presented) The method according to claim 91 comprising a step of 
accepting user entered trial passphrases and providing a user with an indication of a location 
within one of the portions of random data that will be selected for the file index for each trial 
passphrase. 

93. (Previously presented) The method according to claim 91 comprising a further step 
of providing to the user an indication of the regions of one of the portions of random data that are 
already occupied by file indexes having passphrases that have been supplied by the user. 

94. (Previously presented) The method according to claim 64 comprising a step of 
receiving an indication from a user of a location within one of the portions of random data which 
the user desires to use for the file index. 

95. (Previously presented) The method according to claim 94 further comprising a step 
of suggesting possible passphrases to the user in response to the user indicating a location within 
one of the portions of random data which the user desires to use for the file index. 

96. (Previously presented) The method according to claim 94 comprising steps of 
receiving a user input passphrase and suggesting a modified passphrase, 
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97. (Previously presented) The method according to claim 96 in which the modification 
of the passphrase is selected so as to at least one of: move a location at which an associated index 
would be stored towards a desired location indicated by a user and strengthen the passphrase. 

98. (Previously presented) The method according to claim 64 comprising a step of 
deleting the data set stored on the storage device. 

99. (Previously presented) The method according to claim 98 comprising a step of 
removing a respective entry from the file index. 

100. (Previously presented) The method according to claim 99 in which the step of 
deleting the data set comprises a step of overwriting the data set with random data as well as 
removing the entry from the file index, 

101 . (Previously presented) The method according to claim 98 comprising a step of 
reorganizing data stored in association with the file index when at least one data set referenced in 
that file index is deleted. 

102. (Previously presented) The method according to claim 100 in which the step of 
overwriting the data set comprises a step of using at least one random data and encrypted data 
stored in one of the portions of random data for generating pseudo-random data for overwriting 
deleted files. 
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103. (Previously presented) The method according to claim 1 02 in which the method 
comprises a step of using random numbers from one of the portions of random data that would 
be overwritten when adding a further data set to replace any pseudo-random values previously 
used elsewhere within one of the portions of random data. 

104. (Previously presented) A computer storage device for steganographically 
concealing stored information, said device configured with at least one storage area having one 
or more portions of random data containing a file index and a predetermined data set, and 
software carrying out steps wherein the file index is encrypted and is stored at a first location 
determined by an algorithmic process dependent upon a user passphrase, and the data set is 
encrypted and is stored at a second location determined using a process that is unconstrained by 
the process used to determine the first location, and the file index comprises an information 
indicative of the second location. 

105. (Previously presented) The storage device according to claim 104 further including 
application software stored thereon for execution by a computer to enable steganographic storage 
extraction of data sets in the one or more portions of random data. 

106. (Previously presented) The storage device according to claim 104 in which the 
passphrase is used to generate a key for at least one of encrypting the file index and encrypting 
the data set. 
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107. (Previously presented) The storage device according to claim 104 further 
comprising a software application stored by the storage device, the software comprising 
instructions that when loaded and executed by a computer cause the computer to perform at least 
one of the following operations: 

accepting a plurality of user input passphrases and generating corresponding 
encryption/decryption keys; 

determining respective storage writing process starting locations for storage of a plurality 
of file indexes; 

encrypting the plurality of file indexes; 

encrypting a plurality of data sets; 

storing the plurality of file indexes; 

determining respective storage writing process starting locations for storing a plurality of 
data sets; 

storing the plurality of data sets; 

accepting one or more user input passphrases and using said one or more user input 
passphrases for locating and decrypting the respective file indexes; 

locating one or more encrypted data sets stored within the storage device; 

decrypting the one or more encrypted data sets stored within the storage device; and 

outputting the one or more decrypted data sets stored within the storage device as an 
encrypted data set. 

108. (Previously presented) The storage device according to claim 104 further including 
a conventional file allocation table stored thereon. 
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109. (Previously presented) The storage device according to claim 104 wherein at least a 
portion of the device comprises a Read Only Memory (ROM). 

1 1 0. (Previously presented) The storage device according, to claim 108 further 
comprising a Read Only Memory (ROM) portion wherein is stored the file allocation table, 
software and an operating system header file. 

111. (Previously presented) The storage device according to claim 104 wherein the 
device is operable as a removable storage device. 

112. (Previously presented) The storage device according to claim 104 wherein the 
device is assigned a particular identifying serial number. 

113. (Previously presented) The storage device according to claim 104 further including 
a unique hard coded identifier data stored in memory contained therein said identifier data for 
use by a computer for at least one of: 

a) an encryption process used for encrypting at least one of the file index and the data 
set; and 

b) a decryption process used for decrypting at least one of the file index and the data set. 

1 14. (Previously presented) The storage device according to claim 104 wherein the 
storage device has the appearance of a conventional portable memory storage device. 
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115. (Previously presented) A computer configured under control of computer 
executable program code, said program code including instructions for configuring the computer 
to steganographically store a data set within one or more portions of random data contained on a 
digital data storage device coupled to said computer, comprising: 

first storage writing process programmable logic circuitry configured to determine a first 
starting location within a portion of random data on the storage device for initiating a first 
storage writing process for storing a file index; 

second storage writing process programmable logic circuitry configured to determine a 
second storage writing process starting location within a portion of random data on the storage 
device for storing the data set where said storage writing process starting location is determined 
independently from the process used to select the first location; 

data set encryption programmable logic circuitry configured to encrypt the data set; 

data set storing programmable logic circuitry configured to write an encrypted data set 
using a second storage writing process beginning at the second storage writing process starting 
location; 

file index programmable logic circuitry configured to create a file index including an 
entry in the file index in respect of the data set, the entry comprising an indication of a memory 
location within the storage device of the second storage writing process starting location; 

file index encryption programmable logic circuitry configured to encrypt the file index; 

and 

file index storing programmable logic circuitry configured to write an encrypted file 
index using the first storage writing process beginning at the first starting location. 
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1 16. (Previously presented) The computer according to claim 1 15 further comprising 
file index location indicating programmed logic circuitry configured by said software to provide 
a user with visual indication of a location within the portion of random data determined by said 
first storage writing process programmable logic circuitry to be used for storing the file index 
when a particular passphrase is input by a user. 

1 17. (Currently amended) The computer according to claim 1 1 5 which 4s-armnged 
tmde^ he<^ntrek)f^oftw afe-f urther com prising passphrase input processing programmed logic 
circuit--) c < nTy. , ec to accept user entered trial passphrases and provide a user with an indication 
of a location within me~a.portion of random data that w iti-be- seleoted determine d for storing the 
file index for each trial passphrase entered b y a user. 

118. (Currently amended) The computer according to claim 1 15 further comprising file 
index location pass phrase input proce ssing-programmed logic circuitry configured to provide a 
user an indication of regions of portions of random data that are already occupied by file indexes 
associated with passphrases supplied by a user. 

1 19. (Currently amended) The computer according to claim 115 further comprising 
passphrase inp^t^feeessag-su ggestion programmed logic circuitry configured to suggest 
possible passphrases to a user in response to a user indicating a location within a portion of 
random data which a user desires to use for storing the file index. 
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120. (Previously presented) The computer according to claim 1 16 further comprising 
user interface programmed logic circuitry configured to provide a user interface for displaying 
the visual, indications on a display device connected to the computer. 

12 1 . (Previously presented) The computer according to claim 1 20 in which the user 
interface programmed logic circuitry is configured so that a user can use a pointing device to 
select a location within a portion of random data to use for storing the file index. 

122. (Previously presented) A method of extracting a data set steganographically stored 
on a storage device having one or more portions random data containing a file index and a 
predetermined data set, wherein the file index is encrypted and is stored at a first location 
determined by an algorithmic process dependent upon a user input passphrase, and the data set is 
encrypted and is stored at a second location determined using a process that is unconstrained by 
the process used to determine the first location, and the file index comprises information 
indicative of the second location, comprising: 

using a user input passphrase to determine a location for the file index based upon the 
user input passphrase; 

decrypting the file index; 

identifying a location of the data set from the decrypted file index; and 
decrypting the data set stored at the identified location, 

123. (Previously presented) A computer arranged under the control of software to 
extract data using the method according to claim 122. 
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124. (Previously presented) A method of storing a data set on a storage device, 
comprising: 

determining a first location within the storage device for initialing a first, storage writing 
process for storing a file index; 

determining a second storage writing process starting location at a second offset within 
the storage device for storing the data set. said second offset determined using a process that is 
independent of a process used to generate said first location; 

encrypting the data set; 

writing the encrypted data set using a second storage writing process beginning at the 
second storage writing process starting location in a portion of random data; 

creating a file index including an entry in the file index in respect of the data set, the 
entry comprising an indication of the second storage writing process starting location; 

encrypting the file index; and 

writing the encrypted file index using the first storage writing process beginning at the 
first storage writing process starting location, the method further comprising, prior to a user 
finalizing a user input passphrase, accepting input of at least one user input trial passphrase and 
providing a user with an indication of a location within the portion of random data that will be 
determined for creating the file index associated with the at least one user input trial passphrase. 

1 25. (Previously presented) A computer readable data storage medium, said storage 
medium storing a computer program comprising code portions which when executed a computer 
cause the computer to perform steps of: 
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determining a first location within the storage medium for initiating a first storage writing 
process for storing a file index; 

determining a second storage writing process starting location at a second offset within 
the storage medium for storing a data set said second offset determined using a process that is 
independent of a process used to determine said first location; 

encrypting the data set; 

writing the encrypted data set using a second storage writing process beginning at the 
second storage writing process starting location in a portion of random data; 

creating the file index including an entry in the file index in respect of the data set, the 
entry comprising an indication of the second storage writing process starting location; 

encrypting the file index; and 

writing the encrypted file index using the first storage writing process beginning at the 
first storage writing process starting location in the portion of random data. 

126. (Previously presented) A method of storing a data set on a computer accessible 
digital data storage device, comprising: 

initializing one or more portions of a digital data storage area of the storage device with 
random data; 

determining a first writing process starting location within a data storage portion 
initialized with random data for creating a file index; 

determining a second writing process stalling location within a data storage portion 
initialized with random data for storing the data set, said second writing process starting location 
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determined using a process that is unconstrained by a process used to determine said first writing 
process starting location; 

encrypting the data set; 

storing the encrypted data set beginning at the second writing process starting location, 
using only data storage portions initialized with random data; 

creating a file index indicative of which portions of the data storage device initialized 
with random data are used to store the encrypted data set; 

encrypting the file index; and 

storing the encrypted file index beginning at the first writing process starting location. 

1 27. (Previously presented) The method according to claim 126 further comprising: 
making an entry in the file index in respect of the data set, the entry comprising an 
indication of the second writing process starting location. 

128. (Currently amended) The method according to claim 126 

wherein the first writing process starting location is determined in dependence upon one 
of an input informati on p rovided by a user to a computer accessing the storage device and a 
computing implemented determining process which is independent of user input. 

129. (Previously presented) The method according to claim 126 wherein the first writing 
process starting location is dependent upon a user input passphrase and the file index is 
associated with the user input passphrase. 
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130. (Previously presented) The method according to claim 129 further comprising: 
storing a second data set on the storage device wherein a writing process for storing the 

second data set is dependent upon a second user input passphrase, the process of storing the 
second data set on the storage device comprising: 

determining, in dependence on the second user input passphrase, a third writing process 
starting location within a data storage portion initialized with random data for creating a second 
file index; 

determining a fourth writing process starting location within a data storage portion 
initialized with random data for storing the second data set; 
encrypting the second data set; 

storing the encrypted second data set beginning at the fourth writing process starting 
location in a data storage area initialized with random data; 

creating a file index indicative of which portion of the data storage device are used to 
store the encrypted second data set; 

encrypting the second file index beginning at the third writing process stalling location. 

131. (Previously presented) The method according to claim 126 wherein the one or 
more portions of the data storage area initialized with random data are reserved only for use in 
storing data. 

132. (Previously presented) The method according to claim 126 wherein one or more 
portions of the data storage area initialized with random data comprise a file of random data that 
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is managed by a conventional file system management process on a computer accessing the 
storage device. 

1 33. (Previously presented) A digital data storage device for concealing stored 
information, said device having at least one data storage area containing random digital data, and 
having a file index and a data set that are steganographicaliy stored in the data storage area 
containing random digital data, the file index being encrypted and located at one or more first 
storage locations within the data storage area containing random digital data, the data set being 
encrypted and located at one or more second storage locations within the data storage area 
containing random digital data where said one or more second storage locations are determined 
independently from the process used to determine the first storage location, the file index 
including information for identifying said, second storage locations and indicating which parts of 
the data storage area containing random digital data are being used to store said data set. 

1 34. (Previously presented) A digital data storage device on which is stored a software 
application program and which includes at least one data storage area initialized with random 
data, the software application program comprising computer executable code portions which 
when executed by a computer cause the computer to: 

determining one or more first storage locations within the random data to be used for 
storing a file index; 

determining one or more second storage locations within the random data to be used for 
storing a data set, where said one or more second storage locations being determined by a 
process which is not constrained by the process used to select the first location; 
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encrypt the data set; 

store an encrypted data set at one or more of said second storage locations; 

create a file index containing information for identifying said one or more second storage 
locations within the random data and for indicating which parts of the data storage area 
initialized with random data are being used to store the data set; 

encrypt the file index; and 

store an encrypted file index said one or more first storage locations, 

135. (Previously presented) A method of storing a data set on a storage device having 
one or more portions of random data, comprising: 

determining a first storage writing process starting location at a first offset within a 
portion of random data for initiating a first storage writing process for storing a data set; 

determining a second storage writing process starting location at a second offset within a 
portion of random data for initiating a second storage writing process that creates a file index, 
said second offset determined independently from a process used to generate the first offset; 

encrypting the data set; 

writing the encrypted data set using said first storage writing process beginning at said 
first storage writing process starting location; 

creating a file index having an entry in respect of the data set, the entry comprising at 
least an indication of the first storage writing process starting location; 

encrypting the file index; and 

writing the encrypted file index using said second storage writing process beginning at 
said second storage writing process stalling location. 
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136. (Previously presented) The method of claim 135 wherein said second offset is 
determined using an algorithm that is dependent upon an input passphrase. 
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